Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/RYzSxxWBkqoIYdDWQzrtXyD6HxY.roa
File: RYzSxxWBkqoIYdDWQzrtXyD6HxY.roa (raw, json)
Hash identifier: 9uDtpLtRIp3Z50Qzu21CuIdk3zj29vKS3wKK9lm5Lyg=
Subject key identifier: 45:8C:D2:C7:15:81:92:AA:08:61:D0:D6:43:3A:ED:5F:20:FA:1F:16
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143C0487E0E5DD89EE4668DC612304A
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/RYzSxxWBkqoIYdDWQzrtXyD6HxY.roa
Signing time: Wed 01 Jan 2025 09:47:55 +0000
ROA not before: Wed 01 Jan 2025 09:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206802
IP address blocks: 193.59.50.0/24 maxlen: 24
195.187.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c0:48:7e:0e:5d:d8:9e:e4:66:8d:c6:12:30:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=458cd2c7158192aa0861d0d6433aed5f20fa1f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:f4:00:93:e6:ba:60:21:22:d2:02:36:5a:
67:7d:3b:5f:31:d5:2e:95:0f:72:56:5e:d8:c4:e4:
20:54:fa:52:bf:91:9f:33:9b:4e:8e:4f:5e:f9:ec:
29:5c:f0:2e:2a:32:e7:b7:98:73:4c:d3:76:10:84:
a7:4d:4e:be:cc:75:ca:c4:63:f9:34:71:4e:8b:f9:
d6:3d:b1:46:65:76:e2:14:8c:f4:1f:a8:70:39:9b:
a6:5a:dc:d7:2e:a1:41:f7:1f:c2:1d:7e:c8:fa:9b:
c0:88:06:88:e1:dd:58:f9:64:79:a4:6d:63:42:7b:
c3:2f:ee:d8:34:f2:9f:76:36:41:e8:0f:f1:10:36:
23:63:95:0e:8f:97:85:15:fd:2d:46:de:e2:df:fe:
14:40:e6:4d:d7:b4:88:69:c6:39:ad:7e:c9:88:65:
a3:47:e0:37:d3:f9:0d:31:6f:7b:71:86:c2:97:5c:
2a:d1:72:4b:bb:c3:a0:7e:67:b6:88:c7:7a:6d:34:
58:d4:7c:d9:5e:b4:e4:88:0c:6d:d7:31:93:0c:ae:
a7:ac:f4:97:fa:d7:b4:75:4e:4e:2f:2f:6d:ce:70:
67:de:f4:09:6f:c9:7e:8b:58:c3:38:67:56:d0:5a:
03:b8:86:3e:ea:66:1f:2d:80:15:ac:24:a3:b7:77:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8C:D2:C7:15:81:92:AA:08:61:D0:D6:43:3A:ED:5F:20:FA:1F:16
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/RYzSxxWBkqoIYdDWQzrtXyD6HxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.50.0/24
195.187.82.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ae:03:6c:6f:22:99:4e:0f:24:f1:96:52:60:6d:25:85:63:
3f:36:b2:b0:0f:69:e0:ad:eb:89:64:d8:40:2b:17:8c:4e:33:
69:69:f1:6d:ac:20:0e:1f:3b:43:4c:68:bd:9a:2d:8c:5a:ed:
8c:a1:26:13:9e:50:69:4f:9d:a6:13:2e:56:5b:b8:58:96:4d:
c1:a6:ea:4c:24:b5:f6:de:2e:48:ee:e7:93:e4:2b:a9:52:93:
84:fd:09:80:c0:fc:b5:1b:b2:96:31:71:20:44:33:8f:f4:6c:
5a:c7:6a:0e:72:7e:26:f4:bf:12:2f:2d:0e:9d:8b:bd:e0:be:
8c:3c:0d:7a:cf:7e:ee:7e:c5:e0:51:18:d6:7f:c6:83:c3:b0:
47:5a:87:fe:01:0c:74:f6:43:b1:95:c5:bf:d2:90:23:4a:13:
68:3b:a2:da:dd:60:58:47:45:d5:a3:21:5a:73:12:9a:9c:51:
60:f1:b4:da:c9:c4:a4:d6:25:6f:2c:a9:5a:36:56:cd:0d:38:
c0:b3:6e:59:f9:cd:db:c1:b8:0a:fe:ad:c4:35:1c:e1:75:1c:
30:ec:81:d1:bc:b7:f0:9e:bd:e5:dc:b1:72:9f:2b:95:a5:90:
06:70:c2:2a:ab:90:54:1c:fb:25:dc:45:0e:d3:89:16:e6:47:
6d:21:7d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:23 2025 by rpki-client